diff --git a/debian/wit-network-config.postinst b/debian/wit-network-config.postinst
index 32bc74c..a675697 100755
--- a/debian/wit-network-config.postinst
+++ b/debian/wit-network-config.postinst
@@ -180,6 +180,7 @@ case "$1" in
 
     ## START configuring services as we need it
 
+        systemctl disable strongswan    # disable ipsec till we have the certs and all
         systemctl enable firewall
         systemctl restart systemd-timesyncd
         systemctl restart ssh